Nebari group

[amsnyder]

Hello! I am trying to set up a configuration so that a particular user can add/edit conda environments in a particular group that they are a member of. The way I have tried to configure this is by:

1. Logging into the admin console
2. Creating a new group
3. In the new group's Role Mappings (not the user), I added the role conda_store_developer
4. I added the user to the group's members

However, the user can still only edit their personal environments and not the group environments.

I was having trouble finding instructions in the documentation for how to configure this, so please let me know if there's something I missed!

Thanks! :)

[dcmcand]

@viniciusdc can help you with specific instructions @amsnyder. This is a fairly common issue and we are likely going to be changing to make this the default behavior in future releases. We are also actively working on improving our documentation.

[viniciusdc]

Hey @amsnyder, sorry for the late reply. The conda_store_developer role gives you only read access to the conda-store namespace. To provide the user with proper write access, you need to use the conda_store_admin role instead. Though I would suggest you to create a custom role if possible, https://deploy-preview-554--nebari-docs.netlify.app/docs/how-tos/fine-grained-permissions#conda-store-scopes

I would do the following:

1. Logging into the admin console
2. Go to Clients -> conda-store -> Roles
3. Add Role, give a name like conda_store_<my_group>_admin;
4. After the role is created, navigate to Attributes and create new rows: component : conda-store and scopes: admin!namespace=<my_group>
5. Apply the new role under your group role mappings similar to before;

This should grant any user under that group admin rights over the respective conda-store namespace only.

[amsnyder]

Thank you! This worked perfectly. :)